CVE-2020-26168
maven/com.hazelcast/hazelcast
Improper Authentication
The LDAP authentication method in LdapLoginModule in Hazelcast IMDG Enterprise, and Jet Enterprise, does not verify properly the password in some system-user-dn scenarios. As a result, users (clients/members
) can be authenticated even if they provide invalid passwords.
All versions starting from 4.0 before 4.0.3
Upgrade to version 4.0.3 or above.
2020-11-19
source |